SD-WAN-Engineer Practice Test 1 — 10 Questions

Question 1

You need to restrict administrative access to the ION device. Where is this configured?

Accepted Answer

Device Configuration / Access Control. Management access policies are defined under the device configuration settings in the Controller.

Answer

In the routing table

Answer

In the CloudBlades menu

Answer

On the WAN interface

Question 2

You need to ensure that specific branch traffic is encrypted over a public internet link. Which configuration step is mandatory?

Accepted Answer

Enable Auto-VPN on the WAN interface. VPN tunnels are established automatically between ION devices when policies are defined, but the path must be categorized to allow tunnel formation.

Answer

Manually configure IPsec parameters

Answer

Disable firewall policies

Answer

Configure a static route to the peer

Question 3

When deploying a new ION device, which Prisma SD-WAN component is primarily used to initiate the zero-touch provisioning process?

Accepted Answer

Controller. The ION device reaches out to the Controller during the initial bootstrap process to pull its configuration and firmware.

Answer

Prisma Access

Answer

CloudBlades

Answer

Prisma SD-WAN Plugin

Question 4

When setting up a branch site, what is the purpose of the 'Underlay' configuration?

Accepted Answer

To configure the ISP circuit details. Underlay configuration defines the physical WAN circuit parameters (ISP, bandwidth, etc.) for the SD-WAN tunnel overlay.

Answer

To define the routing protocol

Answer

To manage internal LAN switches

Answer

To configure DHCP

Question 5

Where are the primary SD-WAN routing policies defined?

Accepted Answer

Within the Controller policy engine. Policies are defined centrally in the Controller and pushed to the edge devices.

Answer

Locally on the ION device CLI

Answer

On the ISP router

Answer

In the local DHCP server

Question 6

Which THREE types of traffic are commonly categorized for specific QoS treatment?

Accepted Answer

Mission-critical database traffic. QoS focuses on real-time and business-critical traffic.

Answer

Public guest Wi-Fi browsing

Answer

Idle background system updates

Question 7

Which menu path is used to view the real-time tunnel statistics for a specific vEdge router?

Accepted Answer

Monitor > Network > [Device] > Tunnel.. Monitor > Network allows you to select a specific device and view its tunnel performance.

Answer

Administration > Settings.

Answer

Tools > Real-time monitoring.

Answer

Configuration > Devices.

Question 8

When DCI is implemented via an L3VPN overlay, which OMP attribute is most critical to ensure traffic prefers the direct link over the DCI link for reaching local subnets?

Accepted Answer

TLOC Preference.. OMP TLOC preference is used to influence path selection across different transports and links.

Answer

Color.

Answer

Site ID.

Answer

OMP Tag.

Question 9

What is the primary function of the 'Controller' dashboard in the Prisma SD-WAN UI?

Accepted Answer

To provide visibility into fabric health and status. The dashboard provides a high-level view of health, status, and traffic analytics.

Answer

To configure individual PC settings

Answer

To update user passwords

Answer

To manage ISP billing

Question 10

When configuring 'NAT', what is the difference between 'Source NAT' and 'Destination NAT'?

Accepted Answer

Source NAT hides internal IPs; Destination NAT directs inbound traffic. Source NAT modifies the source IP for outbound traffic; Destination NAT modifies the destination IP for inbound traffic.

Answer

Destination NAT hides internal IPs

Answer

Only Source NAT is supported

Answer

They are the same